Privacy policy
SpaceX Website Privacy Policy
Last updated: April 1, 2024
We don’t knowingly sell your personal information, but we still have to tell you what we collect from you and how we use it. We may update this policy from time to time. Your continued use of this site indicates your agreement to the updated terms.
If you are a prospective, current or past Starlink customer, this Privacy Policy does not apply to you—please refer instead to our Starlink Privacy Policy.
1. What Personal Information Do We Collect?
Depending on how you interact with our website, we may collect the following personal information about you, which we have grouped together as follows:
- Identity Data, which may include your first name, last name, and title.
- Contact Data, which may include your postal address, email address, and telephone numbers.
- Profile Data, which may include username and password, purchases made by you, and customer service requests.
- Financial Data, which may include your payment card details and billing address.
- Transaction Data, which includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data, which includes your internet protocol (IP) address, browser type and version, time zone setting and general location, browser plug-in types and versions, and operating system and platform, and the ways in which you use or interact with our website and services.
- Communication Data, which may include your preferences in receiving marketing and non-marketing communications from us, or any audio, electronic, or visual information, or any data in any files uploaded, emailed or otherwise provided directly by you, as well as any inferences we may make about this data from other personal information we collect.
- Employment Data - if you apply for employment with SpaceX, we will collect your employment and work history, as well as personal information related to your potential employment. This may include your education and employment history, address and contact information, demographic information, and any other information included in your resume or application.
2. How Do We Collect Personal Information?
We may collect personal information about you from the following sources:
- We May Collect Your Personal Information Directly from You – For example, if you register for an account, request or purchase products or services from us, subscribe to our publications, request that marketing materials be sent to you, or otherwise correspond with us by any means.
- We May Also Collect Personal Information from Third Parties – For example, from our service providers, subcontractors, search information providers, or as otherwise needed for a specific purpose such a prior employment data.
- Through Cookies and Other Online Tracking Technologies – As you interact with our website, we may also automatically collect information about your activity, or activity on devices associated with you, on our sites and applications, using online technologies such as cookies, device identifiers, server logs and other similar technologies. We may collect information whether or not you are logged in or registered to an account, and we may associate this tracking data with your customer account (if you have one) in which case we will treat it as personal information. Additional information about the various types of online technologies and their uses can be found at https://www.Cookiepro.com.
- To the extent our website uses first or third party cookies as described above, we use only those cookies that are strictly necessary for the purpose of providing the services, applications, and other essential functionalities of our website.
3. How and Why Do We Use Personal Information?
To the extent permitted by applicable law, we may use your personal information:
- For the specific business purposes related to the goods and services we provide;
- To process and deliver customer orders;
- To manage payments, fees and charges;
- To manage our relationship with you, such as communicating with you about our goods and services, providing customer service, and notifying you of changes to our terms or privacy policy;
- To administer and protect our business and services, including troubleshooting, and performing data analysis, testing, system maintenance, support, reporting and hosting of data;
- To detect, prevent, or otherwise address fraud, security or technical issues, including by monitoring and enforcing compliance with our terms of use, appropriate use policies, and privacy policies;
- To defend our interests in the event of a dispute;
- To comply in good faith with applicable laws, legal processes, and lawful government requests;
- To understand what may be of interest to you as a customer;
- To deliver relevant news, offers and other content to you and measure and understand the effectiveness of the content;
- To ask and enable you to take a survey;
- To use data analytics to debug, optimize, and improve our products and services, marketing, customer relationships and experiences and
- To intake and assess your employment application and to contact you regarding the hiring process.
4. With Whom Do We Disclose Personal Information?
We may disclose your personal information with the following categories of third parties:
Our Service Providers: We may disclose your personal information with our affiliates and service providers for the purposes we outline above. For example, we may rely on service providers to host and maintain our website, perform backup and storage services, process payments, collect debts, provide customer service, transmit communications, deliver products and prizes, and perform analytics services.
Government Agencies, Regulators and Professional Advisors: Where required by applicable law, we may also need to transfer your personal data to government agencies and regulators (e.g., tax authorities, courts, and government authorities) to comply with our legal obligations, and to external professional advisors as necessary to defend our legal interests.
Organizations Involved in Business Transfers: If we sell, merge or reorganize our company, we expect that the personal information that we have collected will be transferred to the surviving entity in accordance with applicable law.
We may also share your personal information with third parties based upon your request or written consent to do so.
5. How Do We Protect Personal Information?
We implement and maintain technological, physical and administrative procedures to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the personal information.
Although we endeavor to keep information secure, we cannot guarantee that our security measures will prevent every unauthorized attempt to access, use or disclose personal information. We maintain procedures to deal with any suspected breach of personal information, and we will notify you and any applicable regulator of a breach where we are legally required to do so
6. Your Privacy Rights
Under applicable laws, you may have legal rights to access, update, or erase certain personal information that we have about you or restrict or object to how we use it. If you have such rights and you make a legitimate request, we will do what you request as mandated under applicable laws. To exercise these rights, please contact us using the details in the “Contact Us” section below. For your security, we may need to request specific information from you to help us confirm your identity and make sure the request is coming from you and not someone who has no right to receive it or exercise the right. For more information regarding rights that may be applicable to you, please review our supplemental privacy notices:
- If you are a resident of a US state that affords you certain rights with regard to your personal information, our US State Privacy Noticealso applies to you. Please note that the US State Privacy Notice only applies in those states that have enacted a comprehensive privacy law including such rights, such as California, Colorado, Virginia, Connecticut, and Utah.
- If you are located in the European Economic Area, the United Kingdom, or Switzerland (collectively “EEA+”), our EEA+ Privacy Notice also applies to you.
To opt-out of any communications you receive from us, please email us at privacy@spacex.com or by following the instructions included in the email or text correspondence. Please note that, even if you unsubscribe from certain correspondence, we may still need to contact you with important transactional or administrative information, as permitted by law. Additionally, if you withdraw your consent or object to processing, or if you choose not to provide certain personal information, we may be unable to provide some or all of our services to you.
7. Children’s Privacy
We do not knowingly collect or solicit any personal information from children under the age of 16. In the event that we learn that we have collected personal information from a child, we will promptly take steps to delete that information. If you are a parent or legal guardian and think your child has given us their personal information, you can email us at privacy@spacex.com or contact us using the information listed in the “Contact Us” section below.
8. Data Retention
We will retain your personal information for only as long as necessary to fulfill the purposes for which it has been collected or any longer retention period required by law.
9. Third-Party Websites
We are not responsible for the practices employed by any websites or services linked to or from our website, including the information or content contained within them. Your usage and browsing on any such website is subject to that website’s own policies, including that third party’s privacy policy. We encourage you to investigate and ask questions before disclosing personal information to third parties, since any personal information disclosed to those third parties may differ from our website policy and your personal information may be collected, processed and shared for a variety of different purposes.
10. Contact Us
You may contact us using the following details:
Email: privacy@spacex.com
Postal Mail: Space Exploration Technologies Corp., Attn: Privacy/Legal, 1 Rocket Road, Hawthorne, CA 90250
US STATE PRIVACY NOTICE
Last updated April 1, 2024
As mentioned in our other privacy disclosures the privacy laws of certain US states require us to provide some information about our data processing practices to its residents, including the rights that may be available to residents of those states upon the effective dates of the state laws and regulations. This Notice supplements our SpaceX Privacy Policy by explaining your privacy rights if you are a resident from these states and includes our Notice at Collection under California law. However, this Privacy Notice does not reflect our collection, use or disclosure of personal information where an exception under the applicable state law applies.
1. CALIFORNIA RESIDENTS
1. What We Collect, Who We Collect Personal Information From, and How We Use it
We have set out below the categories of personal information we have collected about California residents in the past 12 months as well as the sources, business or commercial purposes and categories of third parties with whom we disclose the personal information. We collect this information directly from California residents who use our website or create accounts related to our products and services.
|
Category of personal information |
Corresponding reference to category of personal information under CCPA definition of personal information (Cal. Civ. Code § 1798.140(o)(1)) |
Business or commercial purposes for which information was collected |
Category of third parties with whom we shared the personal information |
Retention Period |
|---|---|---|---|---|
|
identifier
(D) Records of products or services purchased (D) Commercial information (D) Tendencies (H) Electronic information (B) Financial information (B) Credit card number, debit card number |
|
Service providers that process personal information solely on our behalf and which are subject to data security measures Same as above |
For the life of your account plus two years. For the life of your account plus two years. |
|
(A) Internet Protocol address (F) Internet or other electronic network activity information |
|
Same as above |
For the length of your browsing session. |
|
(I) Professional or employment-related information |
|
Same as above |
If the applicant becomes an employee, the information will become a part of that individual’s employment file. For those individuals that do not become employees, this information will be maintained in accordance with our legal retention requirements |
While our standard practice is to retain personal information for the retention periods stated in the above chart, there may be scenarios where we need to retain certain personal information for longer periods of time. For example, we may need to retain personal information for longer periods of time if we have a legal right or obligation to continue to retain your information, such as in the event of a potential dispute or to ensure proper enforcement of our terms and agreements.
b. Your Rights
As a California resident, you have the following rights regarding personal information we collect, use, share and discuss about you, specifically:
- Right to Access and Data Portability – you have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, and share.
- Right to Delete – you have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.
- Right to Correct – you have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.
- Right to Limit the Use and Disclosure of Sensitive Personal Information – you have the right to instruct a business to limit its use or disclosure of your sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by you in your request for those goods and services and to perform certain activities permitted by the CCPA. Please note that SpaceX does not use or disclose sensitive personal information for any purposes other than those necessary to provide the relevant services or as permitted by the CCPA.
- Right to Opt-Out of Sale or Sharing of Personal Information:
You also have the right to “opt-out” of the “sale” or “sharing” of your personal information to or with “third parties” (as those terms are defined by applicable law). We do not sell or share your personal information except as otherwise described in this policy, so so there is no need to opt-out of the sale or sharing of your personal information. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.
In order to exercise these rights, please see Section 3.
Please note that you will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you.
2. RESIDENTS OF VIRGINIA, COLORADO, UTAH, CONNECTICUT AND OTHER STATES
If you are a resident of Virginia, Colorado, Utah, Connecticut, or another US state with applicable laws and regulations, our Supplemental US State Privacy Notice also applies to you. Additionally, please note that you also have the right to access, correct, and delete your personal information (as described above). In addition to these rights, to the extent we partake in such activities, you may have the right to opt out of the processing of your information for purposes of (a) targeted advertising, (b), the sale of your personal information; or (c) profiling in furtherance of decisions that produce legal or similarly significant effect concerning you.
If we use or disclose your personal information to third parties for any of these purposes, we will provide you the means to opt-in or opt-out of this type of disclosure as specified by applicable law.
You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you.
Please note that, depending on where you live, you may not have all the rights listed above. To exercise any of these rights, please see Section 3 below.
3. EXERCISING YOUR INDIVIDUAL PRIVACY RIGHTS
To submit a request to exercise the right to access, correct, or delete, please submit a request, with the details you would like to access, correct, or delete, by email to privacy@spacex.com and include “Request to Access, Correct, or Delete” in the subject line, or by mail to ATTN: Privacy/Legal, Space Exploration Technologies Corp., 1 Rocket Road, Hawthorne, CA 90250. Please note that we may deny certain requests, or only fulfill some in part, as permitted or required by law. For example, if you request to delete personal information, we may retain personal information that we need to retain for legal purposes.
We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
We may need to verify your identity, and/or ask you to confirm your request. In order to respond to your request, we may request additional information to complete the verification process. If we deny your request, we will explain why.
You can designate an authorized agent to make a request on your behalf if you sign a written declaration that you authorize the authorized agent to act on your behalf.
If you use an authorized agent to submit a request, please have the authorized agent take the following steps in addition to the steps described above: (1) Mail a notarized copy of your written declaration authorizing the agent to act on your behalf to the address listed below (we will reimburse you for the costs of notarizing the declaration and mailing it to us if you provide a receipt showing the costs paid and they are reasonable); and (2) Provide any information we request from you to verify your identity and that you provided the authorized agent permission to submit a request on your behalf.
Appeals. If you are not satisfied with the resolution of your request, you might have the right to appeal our decision. Our written response to your request will include information about any right to appeal
4. Contact for More Information
If you have questions or concerns regarding our privacy policy or practices, you may contact us:
Email:privacy@spacex.com
Postal Mail: Space Exploration Technologies Corp., Attn: Privacy/Legal, 1 Rocket Road, Hawthorne, CA 90250
EEA+ PRIVACY NOTICE
Last Updated April 1, 2024
If you are located in the European Economic Area, the United Kingdom, or Switzerland (EEA+), and access our website, this EEA+ Privacy Notice applies to you.
As mentioned in our other privacy disclosures, we don’t sell your personal information (also referred to as “personal data”), but the data protection laws of the EEA+, including the General Data Protection Regulation and the UK GDPR (together, “GDPR”), require us to provide information about our data processing practices of certain people in the EEA+.
1. Who Is the Data Controller?
Space Exploration Technologies Corp. is the controller and responsible for your personal data.
Our representative in the European Union for data protection matters, pursuant to Article 27 of the GDPR is VeraSafe Ireland, Ltd.
Our representative in the United Kingdom for data protection matters, pursuant to Article 27 of the UK GDPR is VeraSafe United Kingdom, Ltd.
For information about how to contact us or our representatives, please see Section 7 of this EEA+ Privacy Notice.
2. What Are Our Legal Bases for Processing Personal Data?
We rely on the following legal bases to process your personal data, as appropriate:
necessary for us to perform a contract with you or take steps at your request prior to entering into a contract (“Contract Performance Legal Basis”), to comply with an applicable legal obligation (“Legal Obligations Legal Basis”), or to realize a legitimate interest based on an assessment of that interest and your privacy and other fundamental interests (“Legitimate Interest Legal Basis”); and
is performed according to your consent (“Consent Legal Basis”).
More information is provided below. Please contact us if you need
details.
|
Purpose of Use or Disclosure |
Legal Basis |
|---|---|
|
To manage our relationship with you which will include:
|
|
|
To process and deliver your order including:
|
|
|
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
|
|
To understand what may be of interest to you, deliver relevant website content to you and measure or understand the effectiveness of the content we serve to you, in accordance with applicable law |
|
|
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences |
|
|
To comply with legal obligations that apply to us, monitor and ensure compliance with our terms, and defend our legal interests in the event of a potential dispute |
|
|
Disclose your personal data to our service providers (i.e., processors) as necessary to achieve the above purposes |
|
|
Disclose your personal data to a prospective or actual purchaser or seller in the context of a merger, acquisition, or other reorganization or sale of our business or assets |
|
|
Disclose your personal data to courts, law enforcement or regulatory authorities as permitted or required by applicable law |
|
3. How Do We Protect Personal Data If We Transfer It Internationally?
We may transfer your personal data to service providers and business partners outside of the EEA and/or UK.
Some of these recipients are located in countries in respect of which either the European
Commission and/or UK Government (as and where applicable) has issued adequacy decisions, in which case, the recipient’s country is recognized as providing an adequate level of data protection under UK and/or European data protection laws (as applicable) and the transfer is therefore permitted under Article 45 of the GDPR. The United States has been issued an adequacy decision by the European Commission under the GDPR and related data protection laws.
Some recipients of your personal data may be located in countries outside the EEA and/or the UK for which the European Commission or UK Government (as and where applicable) has not issued adequacy decisions in respect of the level of data protection in such countries (“Restricted Countries”). Where we transfer your personal data to a recipient in a Restricted Country, we will either:
enter into appropriate data transfer agreements based on so-called Standard Contractual Clauses approved from time-to-time under GDPR Art. 46 by the European Commission, the UK Information Commissioner’s Office or UK Government (as and where applicable); or
rely on other appropriate means permitted by GDPR Ch. V, which establish that such recipients will provide an adequate level of data protection and that appropriate technical and organizational security measures are in place to protect personal data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing.
You may ask for a copy of such appropriate data transfer agreements by contacting us using the contact details below.
By directly providing your personal data on SpaceX.com or shop.Spacex.com, you affirmatively consent to the transfer of your personal data from the EEA+ to SpaceX locations in the United States for the purposes of fulfilling a contract for providing services at your request. You may withdraw this consent at any time and request that SpaceX immediately cease processing your personal data or transferring it to the United States for the purposes stated in this Privacy Policy.
4. How Long Do We Keep Personal Data?
We will only keep personal data for as long as reasonably necessary to fulfil the purposes we collected it for. We may keep your personal data for a longer period to comply with our legal obligations or in the event of a complaint or litigation.
5. Your Rights
Regarding your personal data, You may have the right to:
- Request access (commonly known as a "data subject access request") - enables you to receive a copy of the personal data we hold about you and information about how it is processed.
- Request correction - enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure - enables you to ask us to delete or remove personal data where there is no lawful reason for us continuing to store or process it, where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons that will be notified to you, if applicable, at the time of your request.
- Object to processing - where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
- Request restriction of processing - enables you to ask us to suspend the processing of your personal data if, (i) you want us to establish the data's accuracy; (ii) where our use of the data is unlawful but you do not want us to erase it; (iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
To exercise these rights, please contact us using the contact details below.
Although we urge you to contact us first to find a solution for every concern you may have, you always have the right to lodge a complaint with your competent data protection authority.
6. Your Choices
You are not required to provide personal data to us but if you do not provide any personal data to us, you may not be able to use our website or we may not be able to authenticate and assist you with your
orders, inquiries or requests, and we generally will not be able to provide you with our products and services.
7. Contact Us
You may contact us using the following details:
Email:privacy@spacex.com
Postal Mail: ATTN: Privacy/Legal, Space Exploration Technologies Corp., 1 Rocket Road, Hawthorne, CA 90250
You may contact our representative in the EU using the following details:
Email:privacy@spacex.com
Postal Mail: VeraSafe Ireland, Ltd., Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23AT2P, Ireland
Telephone: +420 228 881 031
You may contact our representative in the UK using the following details:
Email:privacy@spacex.com
Postal Mail: VeraSafe United Kingdom, Ltd., 37 Albert Embankment, London, SE1 7TL, United Kingdom
Telephone: +44 (20) 4532 2003